CLEANSTART-2026-VI37845 Apache Calcite Avatica JDBC driver creates HTTP client instances based on class names provided via `httpclient_impl` connection property; however, the driver does not verify if the class implements...

Security vulnerability affects the apache-hive package. Apache Calcite Avatica JDBC driver creates HTTP client instances based on class names provided via httpclientimpl connection property; however, the driver does not verify if the class implements the expected interface before instantiating it...

Apache Calcite JDBC Driver Code Execution

The vulnerability of the JDBC framework driver of Apache Calcite Avatica is related to the use of uninitialized objects during the processing of the httpclientimpl parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2022-36364

Apache Calcite Avatica JDBC driver creates HTTP client instances based on class names provided via httpclientimpl connection property; however, the driver does not verify if the class implements the expected interface before instantiating it, which can lead to code execution loaded via arbitrary...

CVE-2022-36364: Improper Initialization

Apache Calcite Avatica JDBC driver creates HTTP client instances based on class names provided via httpclientimpl connection property; however, the driver does not verify if the class implements the expected interface before instantiating it, which can lead to code execution loaded via arbitrary...